CVE-2020-25846

—

CVSS 3.1

7.4 high

EPSS

<1%p60

Published

Dec 31, 2020 (Dec 31, 2020)

Modified

Jun 17, 2026

Description

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

Vendors: panorama project
Products: nhiservisignadapter
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.